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AMENDMENTS TO THE CLAIMS 

1. (Previously Presented) A method of determining autonomous system volume 
data, comprising: 

collecting data flow statistics for at least one router; 

collecting routing information base data for each of the at least one router, the routing 
information base data identifying at least one selected autonomous system path for a destination 
address; and 

for each destination address identified in the data flow statistics, correlating one of the 
data flow statistics corresponding to the destination address to each autonomous system included 
in the at least one selected autonomous system path corresponding to the destination address 
thereby yielding autonomous system volume data 

2. (Original) The method of claim 1, further comprising, following the step of 
correlating: 

analyzing the autonomous system volume data; and 
reporting results of the step of analyzing. 

3. (Original) The method of claim 1, wherein the step of collecting the data flow 
statistics for the at least one router comprises: 

collecting the data flow statistics during a pre-determined time interval; and aggregating 
the data flow statistics by destination address. 

4. (Original) The method of claim 1 , wherein the step of collecting the data flow 
statistics for the at least one router comprises using a data flow collection program. 

5. (Canceled) 

6. (Original) The method of claim 1 , wherein the step of collecting the routing 
information base data for the at least one router comprises taking a snapshot of border 

gateway protocol data. 
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7. (Previously Presented) The method of claim 1, wherein the step of correlating 
comprises: 

identifying a destination address in the data flow statistics; 
identifying a prefix corresponding to the destination address; 
identifying an autonomous system path corresponding to the prefix; 
correlating a data flow statistic corresponding to the destination address to each 
autonomous system included in the autonomous system path. 

8. (Previously Presented) The method of claim 1, wherein the step of comprises: 
identifying a destination address in the data flow statistics; and 

correlating a data flow statistic corresponding to the destination address to each 
autonomous system, included in an autonomous system path corresponding to the destination 
address. 

9. (Canceled) 

10. (Previously Presented) The method of claim 7, wherein the step of comprises 
repeating the steps of claim 7 for each destination address of the data flow statistics of each of 
the at least one router. 

1 1 . (Previously Presented) The method of claim 8, wherein the step of correlating 
comprises repeating the steps of claim 8 for each destination address of the data flow statistics of 
each of the at least one router. 

12. (Canceled) 

13. (Original) The method of claim I, further comprising: 
computing at least one synthetic autonomous system path; and 

reporting autonomous system volume data of the at least one synthetic autonomous 
system path. 
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14. (Previously Presented) A system for determining autonomous system volume 
data, comprising: 

a data flow collection node adapted to collect data flow statistics from at least one router; 

a routing information base collection node adapted to periodically collect routing 
information base data from the at least one router; and 

a correlation node adapted to, for each destination address identified in the data flow 
statistics, correlate one of the data flow statistics corresponding to the destination address to each 
autonomous system included in the at least one selected autonomous system path corresponding 
to the destination address and thereby yield autonomous system volume data. 

1 5. (Original) The system of claim 14, further comprising a reporting node adapted 
to analyze and report on the autonomous system volume data. 

16. (Original) The system of claim 14, wherein the correlation node is adapted to: 
identify a destination address in the data flow statistics; 

identify a prefix corresponding to the destination address; 
identify an autonomous system path corresponding to the prefix; 
correlate a data flow statistic corresponding to the destination address to each 
autonomous system included in the autonomous system path. 

17. (Original) The system of claim 14, wherein the correlation node is adapted to: 
identify a destination address in the data flow statistics; and 

correlate a data flow statistic corresponding to the destination address to each 
autonomous system included in an autonomous system path corresponding to the destination 
address. . 

18. (Canceled) 

19. (Original) The system of claim 14, wherein at least two of the data collection 
node, the routing information base collection node, and the correlation node are the same node. 
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20. (Original) The system of claim 14, wherein the data flow collection node, the 
routing information base collection node, and the correlation node are each a separate node. 

21 . (Original) The system of claim 14, further comprising a reporting node adapted 
to report autonomous system volume data on at least one synthetic autonomous system path. 

22. (Currently Amended) A method of generating autonomous system volume data 
comprising: 

detecting at least one first data flow having a first volume and directed toward a first 
destination address using address; 

identifying a first selected autonomous system path in a routing information base over 
which said first data flow is routed and 

for each autonomous system in the first selected autonomous system path, incrementing a 
counter by an amount indicating the first volume. 

23. (Original) The method of claim 22, further comprising: 

detecting at least one second data flow having a second volume and directed toward a 
second destination address using a second selected autonomous system path in the routing 
information base; 

for each autonomous system in the second selected autonomous system path, 
incrementing a counter by an amount indicating the second volume; and 

wherein at least one autonomous system in the routing information base is updated before 
the detecting of the at least one second data flow. 

24. (Original) The method of claim 22, further comprising: 

providing counter data resulting from the incrementing of the counter during a specified 
time period; 

analyzing the counter data; and 
reporting results of the step of analyzing. 
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25. (Previously Presented) A method of generating autonomous system volume data 
comprising: 

detecting at least one first data flow having a first volume and directed toward a first 
destination address; 

identifying a first selected autonomous system path in a routing information base over 
which said first data flow is routed and 

for each autonomous system in a first synthetic autonomous system path constructed 
using the at least one first selected autonomous system path incrementing a counter by an 
amount indicating the first volume. 

26. (Currently Amended) The method of claim 25, further comprising: 
detecting at least one second data flow having a second volume and directed toward a 

second destination address using a second selected autonomous system path in the routing 
information base 

for each autonomous system in [[s]] the second synthetic autonomous system path 
constructed using the second selected autonomous system path incrementing a counter by an 
amount indicating the second volume; and 

wherein at least one autonomous system in a routing information base is updated before 
the detecting of the at least one second data flow. 

27. (Original) The method of claim 25, further comprising: 

providing counter data resulting from the incrementing of the counter during a specified 
time period; 

analyzing the counter data; and 
reporting results of the step of analyzing. 

28-30. (Canceled) 
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